Vulnerabilities > Nadine Schwingler

DATE CVE VULNERABILITY TITLE RISK
2011-10-09 CVE-2010-4957 SQL Injection vulnerability in Nadine Schwingler KE Questionnaire 1.2.1/2.0.0
SQL injection vulnerability in the Questionnaire (ke_questionnaire) extension before 2.2.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
network
low complexity
nadine-schwingler typo3 CWE-89
7.5
7.5
2011-10-09 CVE-2010-4956 Cross-Site Scripting vulnerability in Nadine Schwingler KE Questionnaire 1.2.1/2.0.0
Cross-site scripting (XSS) vulnerability in the Questionnaire (ke_questionnaire) extension before 2.2.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. 		4.3
4.3